gitlab-org--gitlab-foss/app/policies/commit_policy.rb

# frozen_string_literal: true

class CommitPolicy < BasePolicy
  delegate { @subject.project }

  rule { can?(:download_code) }.enable :read_commit
  rule { ~can?(:read_commit) }.prevent :create_note
end
Freeze string literals See Danger's suggestions: https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/6869#note_93730253 2018-08-10 12:15:25 -04:00			`# frozen_string_literal: true`

Create empty Commits::UpdateService and wire it up 2018-07-21 04:52:07 -04:00			`class CommitPolicy < BasePolicy`
			`delegate { @subject.project }`
Merge branch 'security-guest-comments' into 'master' [master]Fixed ability to comment on and edit/delete comments on locked or confidential issues See merge request gitlab/gitlabhq!2612 2018-11-28 14:04:15 -05:00
			`rule { can?(:download_code) }.enable :read_commit`
Improper access control allows the attacker to comment in internal commit after they are no longer admin 2019-10-29 11:58:26 -04:00			`rule { ~can?(:read_commit) }.prevent :create_note`
Create empty Commits::UpdateService and wire it up 2018-07-21 04:52:07 -04:00			`end`